CVEs-PoC/2011/CVE-2011-4532.md

CVE-2011-4532

Description

Absolute path traversal vulnerability in the ALMListView.ALMListCtrl ActiveX control in almaxcx.dll in the graphical user interface in Siemens Automation License Manager (ALM) 2.0 through 5.1+SP1+Upd2 allows remote attackers to overwrite arbitrary files via the Save method.

POC

Reference

• http://aluigi.altervista.org/adv/almsrvx_1-adv.txt
• http://aluigi.altervista.org/adv/almsrvx_1-adv.txt

Github

No PoCs found on GitHub currently.